$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa File: 441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json) Hash identifier: BF9WZJrOiSuWYbDRcuOL4OTwmMz7FAlYiSQgr9N84+A= Subject key identifier: CD:57:A5:DD:74:DE:CC:D7:89:B3:62:B6:F5:06:6A:BE:11:8E:46:BB Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BA39D01F34F266D358D497780 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399629 IP address blocks: 192.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:01:f3:4f:26:6d:35:8d:49:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=09c21c26-c0e5-4641-9a0f-a62fe5a0dc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:c9:f9:39:68:a9:c3:65:1e:84:94:2d:8a: ca:c3:b7:59:5c:70:4f:3e:ff:b1:68:71:3a:ce:9c: b1:cb:0e:3c:55:8e:b1:40:03:73:d1:a3:42:12:e9: d6:d6:1c:57:0e:e8:5d:4d:8d:d7:f7:c3:2f:f7:e3: 66:9e:1e:87:f2:49:95:5d:c6:91:1f:8c:4c:24:4b: 5d:15:c3:f0:55:db:93:a3:fd:ad:f6:38:fb:76:f7: 7d:df:fc:10:15:2d:71:a9:9d:b6:12:91:68:52:77: 03:f4:00:3a:fc:5a:c4:67:ac:5d:6a:df:34:fc:40: ec:7c:ed:76:7e:a6:59:7f:aa:12:64:37:d2:9a:0e: 18:6a:6f:35:7b:02:6b:5e:46:6f:ce:2a:83:a6:ec: bb:8c:30:4a:4e:ca:49:14:6d:f7:bf:85:34:3c:96: 96:5b:7b:04:1a:88:e6:68:75:9c:77:f4:79:ce:5c: 4d:61:f1:ab:b2:1e:08:a8:75:fe:fa:9f:ef:5e:69: b0:c3:25:e0:1d:fb:d7:70:d0:8e:4c:08:5a:66:d6: 36:b0:f5:a6:a8:65:1a:55:a7:6d:03:b1:f0:11:37: b1:2e:a9:28:61:61:b9:f3:1f:2c:ab:7e:a4:be:42: 31:25:e0:22:f4:b8:3a:3f:d1:38:15:94:42:47:57: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:A5:DD:74:DE:CC:D7:89:B3:62:B6:F5:06:6A:BE:11:8E:46:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 192.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:84:c8:75:43:9a:ae:fe:09:fd:bf:7e:ff:3c:ff:73:97:ed: db:c5:45:34:06:25:c5:f1:48:81:01:65:a3:e2:c8:e2:08:b9: 9b:c2:0e:05:26:9a:53:7b:ff:74:83:70:11:02:9c:cf:97:62: a0:2a:90:37:74:a1:a5:76:af:6e:f5:04:73:f8:ed:91:36:56: c3:c2:be:f1:d2:6e:47:68:3c:97:1f:54:4d:d4:07:65:9e:3a: 24:3f:cb:54:c8:24:ca:5c:0b:a5:57:10:7e:c8:59:e9:d5:7c: d4:08:0e:df:5f:d4:bb:6f:4f:93:5a:83:0f:fe:11:06:3d:fa: 7a:09:a6:2d:48:60:08:79:da:02:de:a1:9d:b4:1a:7c:ea:17: 0e:03:2e:b3:d1:94:82:fd:93:b0:28:9d:0e:99:07:2c:a6:db: d4:eb:a9:6f:ab:06:0c:36:ee:78:8f:54:2b:6f:fb:90:39:13: 0d:d8:70:9d:82:6f:0a:6d:8f:f0:f6:d5:b6:f7:b8:45:cf:83: 13:78:9c:84:22:ef:ff:5e:67:30:8f:8a:c1:38:ae:46:e9:c7: 1c:19:33:b8:82:68:14:92:0b:e3:58:9b:b8:65:50:0f:4d:c3: 06:f0:d3:3f:68:18:30:3d:d7:64:d4:92:c8:ba:fc:8c:77:1d: 6e:1c:2d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQHzTyZtNY1Jd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDljMjFjMjYtYzBlNS00NjQxLTlhMGYtYTYyZmU1YTBkYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWXJ+TloqcNlHoSULYrKw7dZXHBPPv+xaHE6 zpyxyw48VY6xQANz0aNCEunW1hxXDuhdTY3X98Mv9+Nmnh6H8kmVXcaRH4xMJEtd FcPwVduTo/2t9jj7dvd93/wQFS1xqZ22EpFoUncD9AA6/FrEZ6xdat80/EDsfO12 fqZZf6oSZDfSmg4Yam81ewJrXkZvziqDpuy7jDBKTspJFG33v4U0PJaWW3sEGojm aHWcd/R5zlxNYfGrsh4IqHX++p/vXmmwwyXgHfvXcNCOTAhaZtY2sPWmqGUaVadt A7HwETexLqkoYWG58x8sq36kvkIxJeAi9Lg6P9E4FZRCR1foDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Xpd103szXibNitvUGar4Rjka7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGEyHVDmq7+Cf2/fv88/3OX7dvFRTQGJcXxSIEBZaPiyOIIuZvCDgUm mlN7/3SDcBECnM+XYqAqkDd0oaV2r271BHP47ZE2VsPCvvHSbkdoPJcfVE3UB2We OiQ/y1TIJMpcC6VXEH7IWenVfNQIDt9f1LtvT5Nagw/+EQY9+noJpi1IYAh52gLe oZ20GnzqFw4DLrPRlIL9k7AonQ6ZByym29TrqW+rBgw27niPVCtv+5A5Ew3YcJ2C bwptj/D21bb3uEXPgxN4nIQi7/9eZzCPisE4rkbpxxwZM7iCaBSSC+NYm7hlUA9N wwbw0z9oGDA912TUksi6/Ix3HW4cLUM= -----END CERTIFICATE-----Generated at Tue Nov 4 11:51:13 2025 by rpki-client